Watchlight AI
Back to Blog
Agent Runtime GovernanceAgentic AIAI SecurityEnterprise AIComplianceCISO

The 12 Principles of Agent Runtime Governance, Implemented

Aldo PietropaoloAugust 17, 20266 min read
Share
EARLY PREVIEW
Watchlight AI Beacon
The enterprise runtime control plane for AI agents. Available now. Request a demo to see it in your environment.
Request a Demo

A framework is easy to publish and hard to build. Anyone can write down what good governance for AI agents should look like. The test is whether there is a control plane that actually does it, on every action, in production.

We published the 12 Non-Negotiable Principles for Agent Runtime Governance as the definition of the category. This is the other half of the story: the direct mapping from each principle to the Watchlight AI Beacon capability that implements it. Eleven of the twelve are available today. One is on the roadmap, and it is marked as such.

The mapping

PrincipleWatchlight AI Beacon capabilityStatus
1. Agent IdentityCryptographically verifiable agent identity and registry; untrusted agents are deniedAvailable
2. Purpose, Goals, and IntentIntent declaration and validation, with intent expiry and justification enforcedAvailable
3. Scoped, Time-Bound AuthorityExplicit, scoped, time-bound authority grantsAvailable
4. Deterministic Control PlanesDeterministic policy evaluation, with no model in the trust pathAvailable
5. Plan-Act-Observe LifecycleGovernance at the plan, act, and observe stages, before and during executionAvailable
6. Human-in-the-LoopPolicy-defined human checkpoints when an action crosses a risk thresholdAvailable
7. Runtime Policy EnforcementPer-action authorization against current, versioned policy at executionAvailable
8. Governed Memory and StateGovernance of agent memory and persisted stateOn the roadmap
9. Observability and AuditabilityTamper-evident execution lineage and Agent Runtime AttestationAvailable
10. Safe Failure SemanticsFail-closed enforcement with kill switchesAvailable
11. Tool and Service GovernancePer-action governance of tools and MCP serversAvailable
12. Multi-Agent CoordinationSub-agent scope attenuation and delegation-chain validationAvailable

The one on the roadmap

Principle 8, Governed Memory and State, is the governance of what an agent remembers and carries forward between tasks: the working state and long-term memory that shape its future decisions. It is on our roadmap and it is not shipping yet.

Why this matters

Two things make this mapping different from a feature list. The first is that the requirements are not ours to move. They are published, they define the category, and they hold any system that claims to provide Agent Runtime Governance to the same bar, including ours. The second is that these are not aspirations. Every capability marked available runs today against real agents in design-partner environments, deterministically, before and during each action.

That is the point of building the framework and the product together. The principles advise an enterprise on what to require. Watchlight AI Beacon is where those requirements are met.

Related reading: the 12 Non-Negotiable Principles for Agent Runtime Governance, Agent Runtime Governance Is Becoming Critical Infrastructure, and Agent Runtime Governance Is Not Agent Security.

Found this useful? Share it with your network.
Watchlight AI Beacon

Put runtime governance in front of every agent action

Watchlight AI Beacon is available now, fully on-premises and air-gapped. Request a demo to see it in your environment.

Request a Demo
Recommended Workshop

Agent Governance Readiness Assessment

Evaluate your governance posture against the 12 principles. Get a maturity score and roadmap.

2-3 days · Download one-pager (PDF)

We value your privacy

We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. You can choose to accept all cookies or customize your preferences. Learn more